samba4 gpo and other probs

[Hannu Tikka]

Recently running gpupdate on workstations which are in samba4 domain gives
error:

"Couldn't update grouppolicy. Windows couldn't determine are the user and
computer accounts in same domain forest group" (this is translated form
finnish so it's not exactly word to word)

Also domain users  couldn't logon to windows 2003 member servers, error is:
"The name or security ID (SID) of the domain specified is inconsistent
with the trust information for that domain"
Newsid and rejoin didn't help.

So I created testdomain with win2008r2 server and joined samba4 as DC.
Copied policy folders from windows server to samba4. In testdomain
gpupdate works ok if windows server is up. If windows server is down the
error is same as in other domain:
"Windows couldn't determine are the user and computer accounts in same
domain forest group"

Samba4 servers are 64 bit Ubuntu 10.04 LTS servers. Versions are "quite
fresh git-versions" :).

Hannu